Void Arachne — Threat Actor Profile, Campaigns & Targets

Threat entity extracted from intelligence sources

Frequency
4
occurrences
First Seen
December 18, 2025
Last Seen
March 26, 2026

Void Arachne is a apt_group tracked across 2 threat clusters and 4 intelligence report mentions on ThreatCluster. First observed December 18, 2025; most recent activity March 26, 2026.

Overview

Void Arachne is an APT group observed engaging in a deception-based campaign where Chinese hackers used false-flag techniques to distribute malicious installers masquerading as legitimate Microsoft Teams downloads. The operation targets enterprise networks and highlights sophisticated attribution evasion, making it notable for defenders tracking deception and supply-chain-style compromises.

Related Threat Clusters

Recent Intelligence Reports

  • Tax Audit Phishing Campaign Tied to Silver Fox Shifts From RATs to Python Stealers — Cybersecuritynews · March 26, 2026
  • Silver Fox Abuses Stolen EV Certificates in AtlasCross RAT Malware Campaign — Cybersecuritynews · March 26, 2026
  • Silver Fox Tax Audit Phishing Campaign Shifts from RATs to Python Stealers — Gbhackers · March 26, 2026
  • Chinese hackers fake Teams downloads in false flag ploy — Securitybrief.Asia · December 18, 2025

CVSS v3.1 Breakdown